$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: SNSON2qzZgrgXPOcdD/1sALU3zqorlze7QJKDN0l7QY= Subject key identifier: 16:32:82:E3:50:7C:AA:C9:B4:01:ED:37:6E:93:7B:72:13:BF:44:6A Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 1C0404A6D8471DA12A189F249DE13C8218D4EBE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 01E8 Signing time: Sun 19 Oct 2025 07:01:03 +0000 Manifest this update: Sun 19 Oct 2025 06:56:03 +0000 Manifest next update: Wed 22 Oct 2025 11:55:03 +0000 Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: 2YpxpHFrJduKsAxLULYNBrtdifTBZheX/qgWzcKqMXI=) 2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:04:04:a6:d8:47:1d:a1:2a:18:9f:24:9d:e1:3c:82:18:d4:eb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Oct 19 06:56:03 2025 GMT Not After : Oct 22 11:55:03 2025 GMT Subject: CN=163282E3507CAAC9B401ED376E937B7213BF446A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:34:5e:f0:5a:db:f8:6f:0f:61:44:fd:56:c4: 5a:79:e2:7e:c6:ae:75:5e:7a:81:bf:2e:5b:61:46: 83:ca:af:bf:9f:3a:25:cb:00:de:ab:c1:7e:bc:f6: af:20:d9:82:3a:5f:02:a1:94:fc:74:e5:3e:53:d9: 54:95:e3:7e:ac:01:19:f7:eb:34:e9:76:d3:04:0b: e7:65:55:64:3f:99:b0:e4:c3:5d:d7:60:65:db:81: ae:24:7b:da:59:a2:04:83:85:d1:33:d9:d7:9b:5a: 8a:69:cb:04:e0:85:89:96:5a:ae:71:b2:07:e7:31: 5c:2d:8a:6d:e8:f7:d4:aa:f0:6a:a0:f9:5a:cd:c3: f3:14:71:98:2f:ab:ec:ab:26:55:68:b4:be:7c:e5: 9d:85:77:00:98:f2:be:e1:14:87:1d:58:2d:87:42: 02:1c:98:35:bc:73:12:e4:8b:cf:7f:15:5a:42:76: 03:45:34:9b:41:fc:4a:d9:9e:30:c3:5a:75:3c:1d: 7c:c0:58:97:a7:97:74:5d:01:27:95:7e:a3:95:79: 5b:90:58:db:f7:b1:2b:d7:67:5b:61:a2:44:62:c6: b6:1b:dc:3b:10:0a:a9:2b:b2:70:9d:05:6b:c7:f4: 76:2e:64:31:f5:c9:bd:10:e1:f5:34:52:fd:e1:d4: b4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:82:E3:50:7C:AA:C9:B4:01:ED:37:6E:93:7B:72:13:BF:44:6A X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a3:ce:ab:17:8f:a0:9b:ee:88:bb:60:72:d3:52:60:48:f4: d7:aa:97:9c:16:97:5c:1f:8a:0b:9b:99:19:17:78:bf:88:d3: a2:78:36:c9:e6:3b:90:69:6c:dc:7f:9e:b6:2d:c8:f8:50:d6: 3f:db:75:1f:9a:cc:00:f9:d0:11:a4:cf:72:57:a3:5d:7b:36: 45:fe:52:e2:95:24:d8:ec:89:46:7a:84:9f:c1:e4:c4:39:34: 1e:27:71:3e:87:f8:df:60:fb:5f:85:76:a8:cd:93:28:d9:54: 07:0a:c6:2a:56:25:0e:d3:6c:f7:6a:72:a2:04:66:7c:5d:d0: f7:85:7b:a3:c2:06:f0:33:5b:77:c3:41:1e:32:06:b4:5f:7f: b7:16:ba:58:4f:27:99:af:b2:d9:ad:12:ab:8f:af:be:e8:87: b4:40:ed:09:89:23:31:26:c0:b3:ee:b9:54:7d:39:62:0e:5d: 32:96:6e:48:c8:a1:ea:81:35:ae:1f:dc:55:51:02:9e:71:46: 25:ce:27:83:e0:d2:64:8f:2b:f8:56:ea:98:c2:40:38:72:71: 59:b2:d5:f8:39:89:d7:47:b2:1d:b9:1c:8e:d5:33:72:f1:e6: 90:23:eb:ed:05:b8:8c:79:7d:c7:0c:a3:f5:d4:98:1d:ee:7c: 2d:7a:1f:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHAQEpthHHaEqGJ8kneE8ghjU6+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTEwMTkwNjU2MDNaFw0yNTEwMjIxMTU1MDNaMDMxMTAvBgNV BAMTKDE2MzI4MkUzNTA3Q0FBQzlCNDAxRUQzNzZFOTM3QjcyMTNCRjQ0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNF7wWtv4bw9hRP1WxFp54n7G rnVeeoG/LlthRoPKr7+fOiXLAN6rwX689q8g2YI6XwKhlPx05T5T2VSV436sARn3 6zTpdtMEC+dlVWQ/mbDkw13XYGXbga4ke9pZogSDhdEz2debWoppywTghYmWWq5x sgfnMVwtim3o99Sq8Gqg+VrNw/MUcZgvq+yrJlVotL585Z2FdwCY8r7hFIcdWC2H QgIcmDW8cxLki89/FVpCdgNFNJtB/ErZnjDDWnU8HXzAWJenl3RdASeVfqOVeVuQ WNv3sSvXZ1thokRixrYb3DsQCqkrsnCdBWvH9HYuZDH1yb0Q4fU0Uv3h1LQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjKC41B8qsm0Ae03bpN7chO/RGowHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOjzqsXj6Cb7oi7YHLTUmBI9Neql5wWl1wf igubmRkXeL+I06J4NsnmO5BpbNx/nrYtyPhQ1j/bdR+azAD50BGkz3JXo117NkX+ UuKVJNjsiUZ6hJ/B5MQ5NB4ncT6H+N9g+1+FdqjNkyjZVAcKxipWJQ7TbPdqcqIE Znxd0PeFe6PCBvAzW3fDQR4yBrRff7cWulhPJ5mvstmtEquPr77oh7RA7QmJIzEm wLPuuVR9OWIOXTKWbkjIoeqBNa4f3FVRAp5xRiXOJ4Pg0mSPK/hW6pjCQDhycVmy 1fg5iddHsh25HI7VM3Lx5pAj6+0FuIx5fccMo/XUmB3ufC16H1A= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:28 2025 by rpki-client